nas/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-11-06 07:09:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

test(ci): align PR review contract with Codex intake

Browse Source
This commit is contained in:
moviepilot-codex[bot]
2026-09-20 23:13:07 +08:00
parent 28add6393f
commit 77f9cb51f1
1 changed files with 14 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
tests/test_release_supply_chain.py
View File

@@ -16,6 +16,7 @@ DOCKERFILE = ROOT / "docker" / "Dockerfile"
RELEASE_WORKFLOW = ROOT / ".github" / "workflows" / "build-v3.yml"
BETA_WORKFLOW = ROOT / ".github" / "workflows" / "beta.yml"
PR_AGENT_WORKFLOW = ROOT / ".github" / "workflows" / "pr-agent.yml"
CODEX_EVENT_WORKFLOW = ROOT / ".github" / "workflows" / "moviepilot-codex-events.yml"
TRIVY_IGNORE = ROOT / ".trivyignore.yaml"
WORKFLOW_ROOT = ROOT / ".github" / "workflows"
@@ -295,20 +296,21 @@ def test_all_workflows_are_valid_yaml() -> None:
assert isinstance(workflow.get("jobs"), dict), workflow_path
def test_pr_agent_keeps_pull_request_target_api_only_boundary() -> None:
"""带凭据的 PR 审查只读 GitHub API，不 checkout 或执行 PR 分支代码。"""
workflow = _load_workflow(PR_AGENT_WORKFLOW)
def test_codex_event_intake_replaces_legacy_pr_agent_trigger() -> None:
"""旧 PR-Agent 仅保留手工入口，Issue/PR 自动分析统一交给 Codex 事件桥。"""
legacy_workflow = _load_workflow(PR_AGENT_WORKFLOW)
assert set(legacy_workflow["on"]) == {"workflow_dispatch"}
workflow = _load_workflow(CODEX_EVENT_WORKFLOW)
assert "issues" in workflow["on"]
assert "pull_request_target" in workflow["on"]
assert workflow["permissions"] == {
"contents": "read",
"pull-requests": "write",
"issues": "write",
}
steps = workflow["jobs"]["pr-agent"]["steps"]
assert workflow["permissions"] == {"actions": "write", "contents": "read"}
steps = workflow["jobs"]["dispatch"]["steps"]
assert len(steps) == 1
review_step = steps[0]
assert review_step["uses"] == "docker://ghcr.io/infinitypacer/pr-review-runner:latest"
assert "run" not in review_step
dispatch_step = steps[0]
assert "gh workflow run" in dispatch_step["run"]
assert "OPENAI_API_KEY" not in dispatch_step["run"]
assert "TELEGRAM_BOT_TOKEN" not in dispatch_step["run"]
def test_release_uses_github_cli_for_tag_and_release_lifecycle() -> None: